| description | section | topics | contentType | useCase | applianceId | sitemap | ||
|---|---|---|---|---|---|---|---|---|
This page answers several common questions regarding the PSaaS Appliance infrastructure. |
appliance |
|
reference |
appliance |
appliance33 |
false |
If you have been developing applications with Auth0 in the cloud environment, please review the differences between the two environments. Please speak to your Auth0 pre-sales engineer or customer success engineer if you’re unsure as to how this may impact your project.
While proxies are currently unsupported, please speak to your Auth0 Customer Success Engineer if your needs require the user of a transparent proxy or NAT.
No, the PSaaS Appliance is a managed service that runs within your network. You are responsible for managing the infrastructure around the PSaaS Appliance. Auth0 will manage the PSaaS Appliance internals.
No, the PSaaS Appliance is a managed service that runs within your network. You are responsible for managing the infrastructure around the PSaaS Appliance. Auth0 will manage the PSaaS Appliance internals. The PSaaS Appliance exposes monitoring information in the Dashboard for common metrics (CPU/memory/and so on) or through the API, which can be used by your operations team and monitoring tools to determine how the PSaaS Appliance is performing.
Testall is an unauthenticated endpoint that can be used by load balancers. There are also additional authenticated endpoints that provide detailed information.
While this is currently not supported, preinstalled anti-virus software may be included in future updates.
No. The details of generating certificates, such as a CSR, vary among public certificate providers. Please work with your public certificate authority for these requirements.
If Auth0 hosts the PSaaS Appliance, Auth0 will provide the required *.auth0.com SSL certificates.
Why do both the DEV (non-prod) node and PROD cluster require unique certificates signed by a public Certificate Authority?
Webtasks and web extensions require this due to Node.js security requirements.
Can I whitelist specific IP addresses on my firewall to the Internet sites the PSaaS Appliance requires outbound access to?
For Auth0 PSaaS Appliance updates, we can provide you with specific addresses that are required.
For certain protocols, Internet connectivity is required during operation (such as social connections or emails).
Your server also needs to be able to access cdn.auth0.com if you run web extensions. The browsers used by your admins will also need to access the CDN if they navigate to the Management Dashboard.
Yes, you can use Lock with your PSaaS Appliance implementation.
However, if you choose to operate your applications connected to the PSaaS Appliance in an Internet-restricted environment, you will need to copy the library files to your network (you won't be able to access the CDN that hosts Lock).
If you choose this option, you are responsible for ensuring that your copy of the Lock source code stays up-to-date.
The PSaaS Appliance is a managed service that is deployed as virtual machines and runs on your network, so there is no traditional software installation involved.
Deployment of each PSaaS Appliance node is a manual process that must be performed by Auth0 Managed Service Engineers.
Deployment of each PSaaS Appliance node is a manual process that must be performed by Auth0 Managed Service Engineers.
While the images could be deployed via automation, configuration of the Appliance requires the services of an Auth0 Managed Service Engineer.
No, the Auth0 services cannot be deployed using Docker containers.
Does the PSaaS Appliance environment autoscale (that is, does it automatically spin up new nodes or remove nodes as load and demand requires)?
While the PSaaS Appliance can scale out its service layer, it is not currently designed to automatically scale up (or down) from the number of initial nodes deployed.
Auth0 will work with you during the Sales/Onboarding process to ensure you are deploying the appropriate PSaaS Appliance architecture for your use case.
Our Professional Services team offers Performance and Scalability engagements to performance test and subsequently tune the PSaaS Appliance to your specific requirements.
Auth0 requires remote access to your PSaaS Appliance instances to configure, perform updates, perform maintenance, or troubleshoot. The remote access options are:
- Jumphost + Firewall Whitelist
- Two Jumphosts
We do not support other methods, such as VDI or Screen Sharing mechanisms.
We occasionally tear-down and rebuild environments, and we maintain our data by backing it up first. Is this a problem?
The Auth0 Appliance is not designed to be torn down and rebuilt easily, and such actions always requires Auth0 involvement. We therefore ask that you not tear down the environment on purpose.
To assist in the rebuilding of the environment, we would need to have an active Professional Services engagement in place with you, unless there has been a disaster situation.
You can read the PSaaS Appliance terms here.
Please refer to our documentation on the internet-related requirements for the PSaaS Appliance.